diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index e24d61a..3a76b38 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -147,4 +147,4 @@ jobs:
             --repo "$GITHUB_REPOSITORY" \
             --verify-tag \
             --title "substrate_wiki $tag" \
-            --notes "Patch release for resilient post-approval capability validation across hosted tenant cold starts. Targets Hermes 0.20.x with hosted device onboarding and optional durable history import. See COMPATIBILITY.md and SECURITY.md."
+            --notes "Patch release for resilient OAuth device polling across transient hosted maintenance stalls. Targets Hermes 0.20.x with hosted device onboarding and optional durable history import. See COMPATIBILITY.md and SECURITY.md."
diff --git a/docs/extraction-manifest.json b/docs/extraction-manifest.json
index d876d1b..414a3f0 100644
--- a/docs/extraction-manifest.json
+++ b/docs/extraction-manifest.json
@@ -41,7 +41,7 @@
       "class": "standalone_repository_policy_or_test",
       "path": ".github/workflows/release.yml",
       "reason": "Required only by the independent public repository.",
-      "sha256": "f28c1d1caf9f00c50fa51bc5cbccd1fb012ce7196a98f6863365fdab4ce1f50e"
+      "sha256": "65d10296c23e9a0a993fa674f509d25f7fc9dcc47b35eed51db0a954d1cc3b5b"
     },
     {
       "class": "standalone_repository_policy_or_test",
@@ -353,7 +353,7 @@
     {
       "class": "build-and-install",
       "destination": "scripts/verify_public_plugin_candidate.py",
-      "destination_sha256": "342076e02ac0d40620c859aa9f9af828110a0f818a862dd3bd75afff9222455c",
+      "destination_sha256": "7e0214bb8555fee72327a39f9874707b4eff75aec826916ac604cb904bddd144",
       "source": "scripts/verify_public_plugin_candidate.py",
       "source_sha256": "4130935d530075fce1758e2e89bd5d973a722e2293b5b1058cfe0d17f326172b",
       "transformation": "modified_for_standalone"
diff --git a/scripts/verify_public_plugin_candidate.py b/scripts/verify_public_plugin_candidate.py
index 09d2bef..a829292 100644
--- a/scripts/verify_public_plugin_candidate.py
+++ b/scripts/verify_public_plugin_candidate.py
@@ -276,7 +276,7 @@
     "4b444b2583fbdd340b17d279fd169103c57f87a56dece39988d784b311222920"
 )
 TRUSTED_HISTORICAL_BLOB_POLICY_SHA256 = (
-    "7c56d7b749266ad9506b03d6ed5487efe6cc0b7a5bb7f38142348386b00a4968"
+    "43ba7c7487a3c7168a96852052fa0fc3c4164c2b402abfde3cce97928d7abad3"
 )
 SCANNER_PATH = "scripts/verify_public_plugin_candidate.py"
 DESTINATION_MANIFEST_PATH = "docs/extraction-manifest.json"